Privacy Policy
Your Data, Our Responsibility

Introduction

Welcome to the ko77 Privacy Policy. ko77 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://ko77.io, serving players primarily based in Bangladesh. This Privacy Policy describes how we collect, use, store, share, and protect the personal information of our registered players and website visitors.

We are committed to handling your personal data with care, transparency, and respect. This policy is intended to give you a clear and honest picture of our data practices so that you can make informed decisions about your use of the ko77 platform. If you have questions about any part of this policy, please contact us using the details provided in Section 15.

By accessing the ko77 website, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on our website.

Data Controller

For the purposes of this Privacy Policy, ko77 is the data controller responsible for your personal information. As the data controller, we determine the purposes and means by which your personal data is processed in connection with the ko77 platform.

If you have any questions, concerns, or requests regarding the processing of your personal data, you may contact our data protection team directly using the contact details set out in Section 15 of this policy. We will acknowledge your query within 48 hours and provide a substantive response within the timeframe required by applicable law.

Data We Collect

ko77 collects several categories of personal data in the course of operating our platform and providing services to players in Bangladesh. The categories below describe the types of data we may hold about you:

3.1 Identity Data

Full legal name, date of birth, nationality, and copies of government-issued identification documents (such as a National Identity Card, passport, or driving licence) collected during the account registration and KYC verification process.

3.2 Contact Data

Email address, mobile phone number, and residential address (including city, district, and postcode). For players based in Bangladesh, this may include an address in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar.

3.3 Financial Data

Payment method details necessary to process deposits and withdrawals, including mobile banking account references for bKash, Nagad, Rocket, and Upay, as well as card details (card type, last four digits, expiry date) for Visa and Mastercard transactions. We do not store full card numbers on our servers; full card data is handled exclusively by our PCI-DSS compliant payment processors.

3.4 Transaction Data

Records of all deposits, withdrawals, bonuses, wagers, and game results associated with your ko77 account, including amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers.

3.5 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, session duration, referring URLs, and other technical identifiers collected automatically when you access the ko77 platform.

3.6 Usage Data

Information about how you interact with the ko77 platform, including pages visited, games played, betting markets accessed, time spent on each section, and click-path data used to improve the platform experience.

3.7 Communications Data

Records of any communications you initiate with ko77, including support ticket content, live chat transcripts, and email correspondence with our team.

How We Collect Data

ko77 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated technologies: Data collected automatically as you navigate the ko77 platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Section 10).
• Third-party providers: Data received from payment processors (such as bKash, Nagad, and Rocket), identity verification services, fraud prevention partners, and analytics providers who assist us in operating the platform.
• Publicly available sources: In limited circumstances, we may verify information you provide against publicly available records for the purposes of fraud prevention and AML compliance.

How We Use Your Data

ko77 uses your personal data for the following specific purposes:

• To create and manage your player account and verify your identity in accordance with our KYC obligations.
• To process deposits and withdrawals via your chosen payment method and maintain accurate financial records of all transactions in Bangladeshi Taka (৳).
• To provide access to casino games, sports betting markets, and all other features of the ko77 platform.
• To administer bonuses, promotions, and loyalty rewards and ensure compliance with applicable wagering requirements.
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited activities on the platform.
• To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other legal and regulatory obligations.
• To send you account-related notifications, security alerts, and — where you have consented — promotional communications about ko77 offers.
• To improve the ko77 platform through analysis of usage patterns, technical performance data, and player feedback.
• To support responsible gaming by monitoring play patterns and enabling players to use self-exclusion, deposit limit, and time-out tools.
• To respond to your support enquiries and resolve disputes in a timely manner.

Legal Basis for Processing

ko77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing carried out for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

ko77 does not sell your personal data. We share personal data only with the following categories of recipient, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, for the sole purpose of processing deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and AML screening services that assist us in verifying player identities and screening against sanctions and watchlists.
• Fraud prevention services: Specialist fraud detection providers who help us identify and block suspicious activity on the ko77 platform.
• Game providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive limited technical data (such as session tokens) necessary to deliver their games within the ko77 environment.
• Analytics providers: Service providers who analyse platform usage data on our behalf to help us improve the ko77 user experience. Such providers process data only on our instructions and may not use it for their own purposes.
• Legal authorities: Where required by law, court order, or the request of a competent regulatory authority, ko77 may disclose personal data to law enforcement or other governmental bodies.

Data Retention

ko77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Account data and KYC documents: Retained for the duration of your account and for a period of five years following account closure, in compliance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, as required for financial compliance purposes.
• Communications records: Support tickets and chat logs are retained for a period of three years from the date of the interaction.
• Technical and usage data: Retained in aggregated or anonymised form for up to two years for platform analysis purposes.
• Marketing consent records: Retained for as long as the consent is active, plus one year following withdrawal of consent.

When personal data is no longer required, ko77 will securely delete or irreversibly anonymise it in a manner that prevents reconstruction of the original data.

Data Security

ko77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and ko77 servers.
• Encryption of sensitive stored data, including identity documents and financial records, using industry-standard encryption algorithms.
• Strict access controls ensuring that only authorised ko77 personnel with a legitimate need may access personal data.
• Regular security assessments, vulnerability scanning, and penetration testing of the ko77 platform infrastructure.
• Incident response procedures to enable prompt detection, containment, and notification of any data security breach.

While ko77 takes all reasonable precautions to secure your data, no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your ko77 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function more efficiently and to provide information to site operators. ko77 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on our platform.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the ko77 platform to function correctly, including session management, security tokens, and login state. These cannot be disabled without affecting core platform functionality.
• Performance cookies: Used to collect anonymised data about how visitors use the ko77 website, such as which pages are visited most frequently and how long sessions last. This data is used solely to improve the platform.
• Functional cookies: Used to remember your preferences (such as language settings and display options) to provide a more personalised experience.
• Analytics cookies: Used by our analytics service providers to analyse platform usage patterns and support ongoing platform optimisation.

10.3 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the ko77 platform, including your ability to log in and access your account.

Your Rights

As a player on the ko77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 15.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where possible, please update your details directly through your account profile.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligations to retain certain data for compliance purposes (see Section 8).
• Right to restriction of processing: You have the right to request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of data is under dispute.
• Right to data portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though this right is not absolute.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

ko77 will respond to all valid data rights requests within 30 days. Where a request is particularly complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Minors

The ko77 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If you believe that we have inadvertently collected personal data from a minor, please contact us immediately at [email protected] and we will take prompt steps to delete that data and close the associated account.

International Data Transfers

In the course of providing our services, your personal data may be transferred to and processed in countries outside Bangladesh. This may occur, for example, where our technology infrastructure, game providers such as Pragmatic Play, Evolution Gaming, or Microgaming, or fraud prevention partners operate servers or offices in other jurisdictions.

Where personal data is transferred internationally, ko77 takes appropriate steps to ensure that such transfers are subject to adequate safeguards consistent with the protections described in this policy. These safeguards may include contractual data protection clauses, data processing agreements, and the adoption of equivalent security standards by the receiving party.

By using the ko77 platform, you acknowledge that your personal data may be transferred and processed outside Bangladesh as described in this section.

Policy Changes

ko77 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the policy, we will update the effective date at the top of this page and, where appropriate, notify registered players by email or in-platform notification. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Your continued use of the ko77 platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our data protection team. We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 days, consistent with applicable legal requirements.

Email: [email protected] (plain text — not a clickable link)
Support Hours: 24 hours a day, 7 days a week
Response Time: Within 48 hours for privacy requests
Platform: https://ko77.io

For concerns relating to responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page. For general legal enquiries, please refer to our Terms & Conditions.